[slackware-security] samba (SSA:2014-072-01)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security samba SSA:2014-072-01 New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...

Security fix for the ALT Linux 10 package samba version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Fedora Update for samba FEDORA-2014-3796

Check for the Version of samba OpenVAS Vulnerability Test Fedora Update for samba FEDORA-2014-3796 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Samba 'smbcacls'命令安全绕过漏洞

Bugtraq ID:66232 CVE ID:CVE-2013-6442 Samba是一款实现SMB协议、跨平台进行文件共享和打印共享服务的程序。 当使用"-C|--chown name"或"-G|--chgrp name"选项时Samba的smbcacls工具存在错误，允许攻击者利用漏洞绕过安全限制访问受限资源。 0 Samba 4.x Samba 4.0.16或4.1.6已经修复该漏洞，建议用户下载更新： http://www.samba.org/...

Fedora 20 : samba-4.1.6-1.fc20 (2014-3796)

Fix CVE-2013-4496 and CVE-2013-6442. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

Security fix for the ALT Linux 8 package samba-DC version 4.1.6-alt1

March 17, 2014 Alexey Shabalin 4.1.6-alt1 - 4.1.6 - fixed CVE-2013-4496, CVE-2013-6442...

Fedora Update for samba FEDORA-2014-3796

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-6442

The ownerset function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown or --chgrp option, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended...

CVE-2013-6442

Samba CVE-2013-6442 affects Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6. The owner_set in smbcacls.c can remove an ACL during --chown/--chgrp usage, potentially bypassing intended access restrictions in opportunistic circumstances due to an unintended administrative change. OpenVAS entries c...

CVE-2012-6442

CVE-2012-6442 is a Rockwell Automation EtherNet/IP vulnerability (improper access control) where a valid CIP message instructing a reset sent from an unauthorized/unintended source to ports 2222 or 44818 (TCP/UDP) can cause a denial of service, disrupting communication with connected devices. Aff...

CVE-2007-6442

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6114. Reason: This candidate is a duplicate of CVE-2007-6114. Notes: All CVE users should reference CVE-2007-6114 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6442

CVE-2007-6442 is rejected/not used and does not represent an active vulnerability entry.

CVE-2007-6442

...

GraceNote CDDBControl ActiveX Control Buffer Overflow (CVE-2006-3134; CVE-2006-6442)

A vulnerability has been discovered in America Online AOL CDDB ActiveX Control. Gracenote CDDB ActiveX control contains a buffer overflow error that allows remote attackers to execute arbitrary code via a long option string. A remote attacker could exploit this flaw to execute arbitrary code and...

CVE-2006-6442

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...

CVE-2006-6442

The connected advisories confirm CVE-2006-6442 affects the Gracenote CDDBControl ActiveX control (cddbcontrol.dll) used in AOL software. A stack-based buffer overflow in SetClientInfo allows remote attackers to execute arbitrary code by providing a long ClientId/option string. Impact is remote co...